tinita

That's because PyYAML doesn't implement the spec correctly.

Have a closer look. The 1024 limit in version 1.2 is only for implicit block mapping keys, not for flow style `{"foo": "bar"}`

"the cpan version maintained by this person is still vulnerable"

In our github discussion you admitted that it is not vulnerable if you disable loading objects, which is possible since version 0.69. (Because of backwards compatibility this is not (yet) the default setting.)

Besides that, feel free to incorporate our other fixes, like loading many regexes, which I fixed in 0.68. I see your version still has this bug.

Seems like you think we open source developers are supposed to work against each other.

I got a helpful reply from jwilk that shows why unbless() can still be exploitable. I will edit my article.

YAML::XS 0.69 does not bless objects anymore if you use $LoadBlessed = 0, just like you can do in YAML::Syck.

That's what I wrote in the article.

Unblessing objects afterwards is simply the last resort, and if you do it directly after loading, it should make the process quite safe. That's why I mentioned it. Unblessing via the method I mentioned will prevent it from calling DESTROY methods.

So I don't understand your problem.

I'm using git-hub as well and I find it very DWIM and more complete. (Have to add that I'm also a collaborator now, so maybe a bit biased)

I couldn't figure out how to use git-repo. When I figured out which command I have to use to list pull requests for github, it asked me for my ssh key password. I was wondering why it would need my ssh key at all, so I tried -v, but -v did nothing.

Then I gave up.

Also, it lacks tab completion, as far as I can see, while git-hub supports it for bash and zsh. And since the order of the commandline arguments is not fixed (`request list` vs. `request <user>/<repo> list`) it might be actually difficult to add completion. I'm developing a generic completion generator, which would allow to add completion to existing commands, but it's not able to deal with this dynamic commandline argument order.

Thoughts: 1. Where will the energy come from? 2. While electric cars will make the air in cities better, they won't reduce the needed space (for driving AND parking), and they won't make life more secure for pedestrians and cyclists. 3. In our courtyard, I usually don't find a place to lock my bicycle because they removed some of the bicycle stands in favor of creating some private terraces - this should be forbidden 4. Please concentrate on electric cars for car sharing

See also http://www.copenhagenize.com/2016/10/electric-cars-where-wil...